This appears to be ossec trying to update iptables, but failing as they're in different contexts... now I'm no selinx expert but this CentOS Wiki Page helped... run the following command which will create osseciptables.pp in the current directtory...